| FMRS | 60 / 100 · C | 68 / 100 · C |
|---|
| Reliability | 9 / 20 | 9 / 20 |
|---|
| Security and permissions | 13 / 20 | 16 / 20 |
|---|
| Maintenance | 10 / 20 | 14 / 20 |
|---|
| Documentation | 15 / 20 | 17 / 20 |
|---|
| Setup experience | 13 / 20 | 12 / 20 |
|---|
| Best for | - Users who want to access a local Obsidian vault through multiple MCP clients.
- Note workflows that need to preserve raw formatting for unmodified frontmatter fields.
- Knowledge-base users who need local file operations, search, and tag management.
| - Users who want secure remote access to their Obsidian vault from any device.
- Integrating Claude.ai (web) or mobile with Obsidian.
- Those needing concurrent writes with Obsidian Sync without file conflicts.
|
|---|
| Not for | - Users without an Obsidian vault or local vault directory.
- Users seeking a remote network service, cloud-hosted service, or non-MCP integration.
- Users who do not want an AI assistant to access or modify vault content and structure.
| - Users who only need local stdio MCP access without remote capabilities.
- Those unwilling to set up an OAuth password or use a Cloudflare Tunnel.
- Users with extremely high security requirements who distrust network exposure (though encrypted).
|
|---|
| Required permissions | - Requires Node.js 18 or later.
- Requires read access to the specified vault; writing, moving, and deleting also require the corresponding write permissions.
- The server can access allowed `.md`, `.markdown`, `.txt`, `.base`, and `.canvas` files.
- The AI assistant can see allowed file content, directory structure, and some file metadata.
| - Read and write files in the directory specified by VAULT_PATH.
- Perform file operations (move, delete with soft delete to .trash).
- Create daily notes, write binary files.
- Maintain an in-memory frontmatter index, potentially modifying index files.
- Access the network (for Cloudflare Tunnel, heartbeat URLs).
|
|---|
| Risks and side effects | - The server provides full read/write access within its security boundaries, so incorrect instructions can modify or delete notes.
- Vault content, structure, and file metadata may be exposed to AI conversations with access.
- Permanent deletion may be unrecoverable; back up the vault before write operations.
- Path filtering does not isolate content, so sensitive data in allowed files remains readable.
| - Credential leakage: exposed OAuth password or MCP token could allow unauthorized access.
- Path traversal mitigation is not infallible; keep updated.
- Extension system is not sandboxed; loading untrusted extensions could be risky.
- Audit log is best-effort and not tamper-evident; records may be dropped at runtime.
- Misconfiguration may cause the server to fail to start or expose vulnerabilities.
|
|---|
| Supported clients | Claude Desktop, Claude Code, OpenCode, Goose Desktop, ChatGPT, IntelliJ IDEA 2025.1+, Cursor, Windsurf IDE, Ontheia, Microsoft Copilot Studio, Codex | Claude Desktop, Claude Mobile, Claude Web |
|---|
| Tools | 14 | 20 |
|---|